Managed Security Services (MSS) : Basic connection requirements between LCP and off-box server

Products

• Security Information Manager

Issue/Introduction

What ports does the Event Agent when installed on an off-box server require.

Resolution

The following are the prerequisites for installing the Symantec event agent and collector in off-box server:

• The LCP hostname should be resolvable from the computer on which you are installing Symantec event agent.
• Ensure network connectivity between the Symantec event agent installed machine and LCP is intact
• The following ports are to be allowed if there is a firewall between the Symantec event agent installed machine and the LCP

1.     TCP 443 from Symantec event agent installed machine to LCP (To send the device logs to LCP)
2.     TCP 5998 from LCP to Symantec event agent installed machine (To push the collector configuration)   
3.     Connectivity from the off box to the Symantec Live update server (198.6.48.25) over port 80.